From dc7f1bb8f52569b158f0c24c02070fcc459e580d Mon Sep 17 00:00:00 2001 From: Malfurious Date: Mon, 10 Jun 2024 09:06:09 -0400 Subject: postfix: Prevent leaking MUA IP addresses Protect user privacy by stripping IP addresses from headers received from authenticated mail submission. Headers for mail received from other servers are unaffected. Signed-off-by: Malfurious --- postfix/submission_header_checks | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 postfix/submission_header_checks (limited to 'postfix/submission_header_checks') diff --git a/postfix/submission_header_checks b/postfix/submission_header_checks new file mode 100644 index 0000000..a792ca5 --- /dev/null +++ b/postfix/submission_header_checks @@ -0,0 +1,2 @@ +/^Received: from [^ ]+ \([^ ]+ \[[IPv0-9a-f:.]+\]\)\s+(.* \(Postfix\) with .+)$/ REPLACE Received: $1 +/^X-Originating-IP:.*/ IGNORE -- cgit v1.2.3